{"report_id":"a1529aa4-1b75-4c42-8427-ae740959f864","version":6,"status":"done","tags":[],"date":"2026-02-01T14:51:42Z","url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"172.67.158.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"title":"Coin Strike Wheel","dom":{"size":26493,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (538)","md5":"3025c5dc6e6860c44db81b23bef421c7","sha1":"fbd6860a6905a14b2cc1959c2c3b509f405a644a","sha256":"743dbcd645fc99c50ab2e68e0e3db299dfc1fdd8b3ec45ec2e0e6cbd83393298","sha512":"9948458e74a4dfcd950f758ee5ef796f633642b53df85b2117d3714555646d7f3ff371391d3b42f572f8c9035fef6071aa0143fd9bd4dfb6fb1a360fef87395b","ssdeep":"384:snY4NpdgYiVLNlayTF6biki3PFKRQ926ehke:I2YYLNlaMF6uF3PFKR026ehke","tlshash":"6bc2756298f319672113d1a52fbb5b093a749003d14acd1537fca6998fc2ec2cda37ad","dom_hash":"domhasha607c0d935df2711dc9a9a524a584102","first_seen":"2026-02-01T14:51:45.712221Z","last_seen":"2026-02-01T14:51:45.712221Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"172.67.158.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T14:51:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"coin-strike-wheel.win","ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-12","domain_rank":0,"first_seen":"2026-02-01T01:01:08.32136Z","last_seen":"2026-02-01T01:01:08.32136Z","alert_count":46,"request_count":46,"received_data":3917180,"sent_data":26800,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22b88bb08e1e628349f7dd37d5fa6213","sha1":"e956ab7ce192f6c72a4e79520d98d2ffd1eb97a6","sha256":"3caad084bd3048c29cb973c9162e6ac79d72a5590f7bd12fcfe113fb15934a85","sha512":"e29efe2f8c339325f5791b9caedc1a5a92f70d49a91bae83b7692c76705f1d7d509f5a7cf9ba6c4f149fec702c5b96107c4f721eda062e42ba6784d55522977c","ssdeep":"","tlshash":"7ce0863455af647125e75b2e0b0bbf49262234a36150ce407b8f4f8aefd101710917d6","size":375,"data":"","first_seen":"2025-10-24T07:32:04.777127Z","last_seen":"2026-06-06T22:29:24.172663Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/reg-sw.js","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96b9d3799c9fb799e1f471ce25a73e8b","sha1":"63ce3352dfe829cb431fb38873894e5379733d69","sha256":"147bf5206373d93ce9743b4af186f950831fe8cd3eade77cbc567e8ecc2b1e1d","sha512":"71c8dcffdafdb84cba5421895cee65fa760434689079ad9f36c2e0c8a616e32fab9ff9d0a86a3a45f878d4029771f3a310a9d6c7fafc5cab4d1c4bd7451d95e0","ssdeep":"","tlshash":"8ce026568dd518370d7390668f07730623af41838084ca657bfe87502fc192a42ab8d2","size":332,"data":"","first_seen":"2025-06-13T21:59:19.284491Z","last_seen":"2026-05-08T10:42:36.620464Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/commonBonuses.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f49fd931045373ae28f946777c1c2ec","sha1":"01c16f7851d5285f951d373941c2d2ea2f2130f6","sha256":"72b8d4c7f274327451d034116f87b6faca4ac50dee8ab7724c4b2111c713c63b","sha512":"5e1e78b80aa1e8565d9e740eb72a37b246e2142f02b17cb7692b516bb35e09979607bbc50a62aee9d1b63005366b1354c972fc1422d03a1efff42239cd4c0afd","ssdeep":"","tlshash":"dd51ed9db64a68b9469e14d63bbb13cb5615bc413d0390805d3c9cc13d77b8242ebebc","size":3081,"data":"","first_seen":"2026-01-07T15:00:18.072433Z","last_seen":"2026-02-08T09:06:55.657759Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6429f7598f98214aebbd29d86689d1e","sha1":"8cf5c225f7ec32c7f0e2b26bab3dbf76d09df735","sha256":"d3f9c3211f2f5936b32a48f8725f3696e048445954d39773507d7affa6d0eaf6","sha512":"c48fcd80336da0547e10060fa2654a51992560974a3af890cc4321ff2b6d558e1e4894b088bb37a757effb779a3e604b6f7d4336446776b8e98a542495da60ff","ssdeep":"","tlshash":"e90100091bb248280217e86912ef9a4d23399017134bcd533a2c41888fe1f62edb2be8","size":822,"data":"","first_seen":"2025-06-13T21:59:19.29987Z","last_seen":"2026-05-08T10:42:36.630892Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20ebfdf3ff09e08b3781dd0f91acaf45","sha1":"2f5260d8626249332a274a9d99975d721b66cbc6","sha256":"55e7817c89d6d1b6104d095cb70f62d6618b296b7571bddc27a9c409425a5503","sha512":"09daa6c2fc51765c3020e4fb620611cf41be6f3d49b0afc8ca7c735f5b1795dff91ada328eec81890e419727b56e4dabab79ca7dd5b947341af6e9504c6fb412","ssdeep":"","tlshash":"4c31f09b3ab61ab649fbb0ba528f5755363280033550ec9637acc6005f00ec5dcb7ac0","size":1757,"data":"","first_seen":"2025-06-13T21:59:19.300999Z","last_seen":"2026-06-06T22:29:24.174698Z","times_seen":312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8adbdd3a2d71893d4eb590d86daa485","sha1":"49b39318301647bbc0e13a4f10cab3debd48822b","sha256":"90d01815b627a2ba25028c6a22c29446cd116006513580298be8159746a8fa4e","sha512":"e1e86be5e29c7460be6e7cba1ebc10b4422056fbdcec25060d72640c7822efed51c66594f07bd02532efa6d49e50678b29a25e5687cba82264422429c3f1084d","ssdeep":"","tlshash":"e5a0241405030173ddd04010515031131c3350f14c44c1d1774cc0c077d0007f0d0301","size":74,"data":"","first_seen":"2026-02-01T01:01:12.987994Z","last_seen":"2026-02-01T14:51:45.745009Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"939f9b15b95fa4cbea46c0ce13e46254","sha1":"deec3da8eecb60062f727a448f87d8d15d7f4444","sha256":"44ced22326567441075b28fc9056807b17241c7a3c6a36518a16125803b38000","sha512":"7040d4e2eca3e4d63af132f01d26ab33fe5d7cec3fe5f89d88ca455958af8d7240c9e65f793ca22848e402ddc404aa1b5a139470ee711ce73d7a32c28f3a379b","ssdeep":"","tlshash":"08900230082ac700113051255705550098160073460554023589d258ab5006b9175b94","size":43,"data":"","first_seen":"2026-02-01T01:01:12.989383Z","last_seen":"2026-02-01T14:51:45.74592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/eventsPlacement.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cf2e2db5eeb1fdee13c58f9fbf6d10a","sha1":"f8b0bd1378f81757bfbedec3a5ca1937c31b92db","sha256":"dcdf284d2d3d815225ca4e9a9bc783d1b5eb3f6c08abd73a292bed2bab758e31","sha512":"5fda356e9b2eb9986d54a8a997ee31cdd9a3d4e95b1c19a5114abf6a5d8fdc2360b8eae6d6a30f19c383087cffd24f4436c79910ab347c4a1b603cfc8ce461a5","ssdeep":"","tlshash":"476145ca365f319042aa95fa6357320562265acb3d4ad4549018c1803c7fd1bc77fafa","size":3260,"data":"","first_seen":"2025-12-08T01:11:36.14103Z","last_seen":"2026-02-08T09:06:55.669988Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be729396b15e517b7dc57775e72b9765","sha1":"878f3297aca39f8d33db55f8366008b60b98a79b","sha256":"76c0f10cb5db382141c63749ec6ed8a23f1c3b50e3e5e7233db0ed640cc6fdb7","sha512":"6c88b58ab19a5bedc2ecb777b60c0ecefedb63a124f4bf88a36b95d82201d2d120b9657e997aa69e9b47a6d66427694ef67421a1825f55d28dd026fd0960b226","ssdeep":"","tlshash":"59a002149432ea5056a803e8873a3343104384b634e6934579ddd9625fa950fa9b8fc2","size":69,"data":"","first_seen":"2026-02-01T14:51:45.746676Z","last_seen":"2026-02-01T14:51:45.746676Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8adb9dde6d554d2b695220140680527b","sha1":"7434fb38ede72374f06a639c54cf50a6687e4fb3","sha256":"31a94a21741af343acb80cf8b099252dd9ce00ad5e241efe961a6111aab9fb03","sha512":"43b67ad1cdc096fb485e9e73019ef35889800ce0dffe2f9395eb57e4a8f0fb118cfab015ae93e7edb946ad2e351d1598fa944844c8f55223f63daf097a11aaa1","ssdeep":"","tlshash":"99d01225401757b59cf0c6b5577763e134538579541495907bafc7906f2020bd9a0549","size":196,"data":"","first_seen":"2026-02-01T14:51:45.747435Z","last_seen":"2026-02-01T14:51:45.747435Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"319e78b1e7a612d8bde790f1ff786d36","sha1":"fe2acd09d7056edf57d55c49c4a4860f958e26d9","sha256":"b042dc3e5aa5811751b3cb69970aaddb32a777286f21394098fb7df7d6b3b223","sha512":"ea2884bb10e2bd3ba02b4fbe841fb71478971b9318b49656bf12e9c4b681e234bd7c4e7bed8a0ea5c1e82a55d66da2d5a9e4cd224bfaeee52734bfc17ab1ece0","ssdeep":"","tlshash":"37800088200a0028022200202a0ba32028ca88ab838b0020be0c82003b2020b800aba8","size":34,"data":"","first_seen":"2025-07-27T01:23:31.429096Z","last_seen":"2026-06-06T22:29:24.18026Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50e6d9a2c793ec92679392d04b6b4572","sha1":"1d544d49ed3f02179ae36805a02bd4bfd6810896","sha256":"633df8c3053e9ba291c72af0aeaf25f71602175115ae1a2a18e2d4aff9064e40","sha512":"4b9abb900627865027e89a318e45ceacf4d394cc5aa449c3be8077abab54f68a2310eaa29b022e87b5d9468690fddd614d79a8fc2030d3c9ca8dd486e49ccd35","ssdeep":"","tlshash":"e19004d174134000041d1c11475571d01131d4f7404544417d1cd5013fd5443cd0d3c0","size":43,"data":"","first_seen":"2025-09-24T03:47:39.780311Z","last_seen":"2026-04-14T23:27:20.354692Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/common.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d06b68551a5fffc54051ca6b4ba90c7","sha1":"725f1d705935da6848934174f5ea2ed2bc3e3900","sha256":"00ea3d7b2cccf5c4ff368d89c8223c28afc016d888d2a5198897a17c2003d56c","sha512":"fe21a49290f351eb4d3f7c79959c03414aa3c4a66a9e05c25c20a4c3320fb941ed912b2c5976cd6b592fb95447fe5719cd1f7a5ba3457cdb906ebf38ce8be9b0","ssdeep":"192:qSuKY27WwSSZ1TnuhgKVqEzjB69FqGdJpyQxD:qdKYhwSUjkLEEvB6zqqQID","tlshash":"1632548e33e66d7507f128ff62217911d025590a3c8ea484782ce996386a7078a7ff7c","size":11613,"data":"","first_seen":"2026-01-07T15:00:18.078913Z","last_seen":"2026-02-08T09:06:55.6408Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16f8c2088af88b8675ebc7c4a6267150","sha1":"9db21c1935374c74ded0c0cf64c965157455e970","sha256":"a2958b1bb2b23f81fbeb43525396f318da267e9de14aaf288d24ac59670452b7","sha512":"5b5aeea6f857eb56f80c9d4fcc53ffbf5c59a4c0f84ebe23f18e5bda2f9f38f67a6fec162681c807d346a6966edb366c408a4e3920083511e42f3750f3479111","ssdeep":"","tlshash":"a99004545340101c111040740503113474010513400d40547d0f57043f30107c1047c5","size":46,"data":"","first_seen":"2025-11-24T23:21:06.447979Z","last_seen":"2026-06-04T05:54:03.971097Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f50e9a7669ec3ec0e76858cdf875ae68","sha1":"2cdf9ae463824d2d499028016959dc98c187d10f","sha256":"4c34c28c9e8e19f41287d6de251bbe14e60ac926a0b9212c016483f61c38a5c3","sha512":"bb95b28ea0ab8e100b914b0fa1f0bd91130852c25fe0000313cd4ecff257a046b67f5817305981af6b3f9681b34551375f0c10350b984f118035d97e4b5dfd22","ssdeep":"","tlshash":"b98000080000002822a0a0328e033220be02082380232000fe8ca2083bb0203a088b88","size":36,"data":"","first_seen":"2025-11-20T05:50:51.366435Z","last_seen":"2026-06-06T22:29:24.181441Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/commonWheels.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50e346776bebc5d316323a09f6eff9cb","sha1":"7a560f72c23d457e5c49fd664c342eff83feec6a","sha256":"d7a596e29ff6a29cd9f1057533abe6ce724b184d092511f3a5b8f6522c39e565","sha512":"c83aeaf5f256dc544764ac3fcf59a0eec7c3a8d65410fc83c1be38126f882a3e9ffb92dd34f10f16748324545f68979fde7fdc5e417fc4edc9db3f2b92a045be","ssdeep":"96:/7lzAVgKn6GE9+tvfvcymNXDX5KpovQHJc1U0dQVcHLbX96jhVVDldwICtSumMSC:ZAjnN5vcyEXT5KRWO0CVSLbN6FDlgLSC","tlshash":"36b143ea365a3575429a28bf43b73553b4a47d117c42f8c0102ca8493e7bb45503be3a","size":5519,"data":"","first_seen":"2026-01-07T15:00:18.067352Z","last_seen":"2026-02-07T14:50:21.82328Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/intentPlacement.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3210fa1fb5dae9144cd793f11f4cd38","sha1":"0c3a0039c3ac54ccbf4c9124abb5b4350e16abbb","sha256":"3ac7b5e9cafcf9734fa034e2047a7155db8428b5960cc7ff28edb7e66b398724","sha512":"3498b02996b33cb90677227e82b39124620414a3ac095e989591af12c0af0089e8643f9e3de17852b150e747b7157bacfb261dc7bf9a0b3297d7e325f28a783a","ssdeep":"","tlshash":"b751cb99675e656507ed98ff73763282a850be413e47a440845ce0993873b03c0bbb78","size":2563,"data":"","first_seen":"2025-11-20T05:50:51.32315Z","last_seen":"2026-02-08T09:06:55.673297Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/uaParser.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0506891626c0d940464888ac2e1c12f3","sha1":"ff48ebad4bac1d5a51bf1e6461e1d92e0e60614d","sha256":"9400fda80a27af142fc2e43863688e56befaf7a12e3fc78f04a103eb86d78554","sha512":"afb95c16b5d252e29c85af01d6aeb4db98fcf658884f7b6294012632d0320e07fde669769cf46362b1df0d9df037e28bb3010c705e78355f2142a0cc189fcfae","ssdeep":"384:0p9M53S7Fwb/6i3u93oRBr+dAHAKzoBvN2K6HDY9rsKTHsk9:0p9C3Hyuu9YRBKdwADNmDY9rsKTl","tlshash":"a9a2c93ed365bf2083bef599c51790002d3a9c2adb41b4f9dae47540e8d68b1229f772","size":21535,"data":"","first_seen":"2025-01-05T20:12:01.773233Z","last_seen":"2026-05-08T10:42:36.599326Z","times_seen":272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/howler.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35b05f6bdae4d21f9e7605c3f694618b","sha1":"b6372df90319b4a09ca9ab8bdf7aadb256340c0b","sha256":"80b9d4fdbd3210509c00b74ae93d624461c419f9b35914ad9d5a5a73f9f27aba","sha512":"c57cf319af996816455762cbc1a910a80fd4315cf1ae7ecee628f203734945386062726ac3ade06401b98cd2dec70f877f7d482312e4f2ec6f040650880086e2","ssdeep":"384:FcZaGJ2y93cl6oStbVNIvablsa1hYxD+NvJ+fdcBs0RG2Y:mc8CmCaltoxDY+V+sUE","tlshash":"88c21a4c77e1bd24839e30a3323f4a027b721a17145e6650f516c1e67f68e8ba07de6e","size":26925,"data":"","first_seen":"2026-01-07T15:00:18.077321Z","last_seen":"2026-02-08T09:06:55.646747Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50401eddc0de872401271b68821bdae7","sha1":"dacf7bd9491203b3509207a15e2dba3e90f3ab18","sha256":"1d348754241732d94ff7f58f3883892e64987d78d467bc2cbf46522d16178a96","sha512":"2d5fa49f7aaa88d64523955770476678b79286551f16eaab295580d6b1852f7e94117f90b027f2d706541bbbcdece089d5aa3d6a5341e0963f5349a6ca5bcaa7","ssdeep":"","tlshash":"d8b09b11d01357f699e557a5157151e11c51d594281055e071ee56f061146d5cab4c1c","size":129,"data":"","first_seen":"2026-02-01T14:51:45.750276Z","last_seen":"2026-02-01T14:51:45.750276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/btn.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/btn.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10662\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-29a6\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=heLMBj45FppDRcUiu5YWXesGur2dEVt8Mzi4%2BYq1QdBE41avoJqYAuIRBwyDPQEOIsmwnzxRD0yCpq19ZakPrvqvngL9BoosT1Bui6AjxAKeb%2FNDPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bc8265a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10662,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ceda48d99b295426dff516dbea06be8","sha1":"d9b1d91f01f09fd9708ee5896aedd043dabd13e4","sha256":"6875ed64f1685e8425eecb31934d4ed85751a433ac84c06ab567d39cc5835b05","sha512":"b8dd7a9f1a9afdc5383efef75fdf598fb51aa1c5632ad9d03b0c76d47a9cb18d28de18a9dad3c44c42edbd7580736f90e04d6bab53aa4985a2450389fc761324","ssdeep":"192:nMbBVLYVsi28kY/xS/xtishraRHa3HeV+TTD8MwlpC4PPvLt65:nMV0sCAxsshraRHa3RD8HFDM","tlshash":"ac22c0458798ba0b8cb448325f002a34745c676cdeb6c7f2347847dfbc6762b16a4738","first_seen":"2026-02-01T01:01:12.932156Z","last_seen":"2026-02-01T14:51:45.713107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/sound/winSound/1.mp3","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/sound/winSound/1.mp3 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 180480\r\nlast-modified: Sat, 13 Dec 2025 17:59:11 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96f-2c100\"\r\naccess-control-allow-origin: *\r\ncontent-range: bytes 0-180479/180480\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKxsJEOZfzEV%2BTZ3%2FSM8cYipEYN95AuLxzVkLQiWvaiYVtfyxxpupjrKMr3pfFsZwUvhv7EKpYGKMa1V5Bda0VpnIYvfW6kFwvz5%2B80mMzIqZx01Tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442c684c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180480,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 256 kbps, 48 kHz, JntStereo","md5":"02dbb959e7fc558668bc12683e0eb885","sha1":"9cf2ecfbff5abe5222014e2d266f558720201921","sha256":"bdad67c303294e1c806e136e9d9cea5d3814ab8b89190fcc6a9ca2fb180dc76e","sha512":"c3be9960283fdd88b0659b0b7cbecde62f020860be2b2e9c781a5af758f8a36a592868fe599d99237980520ac23b116cd57c6312cd1acbb78f780008e747a29d","ssdeep":"3072:Ck7r+fEVLKUbszSEQWGz2gbEE5tkHS26ONGRHH76MQypw0uyDZatXjIjpFfvkV6Z:CsKfEVLvbszSEQWGz2gtky26Oyd7pwcD","tlshash":"b404129477153b6ff48a165bce82d3e2d96f8dac092c65c3e1482778d07faa2df09084","first_seen":"2025-12-11T12:53:53.446141Z","last_seen":"2026-08-12T05:32:15.101493Z","times_seen":229,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/favicon-16x16.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/favicon-16x16.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 322\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=6,i=?0\r\netag: \"693da96d-142\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RexWD4IqPqfFsOkMYQ9D9kUVf5lSYg8f7hLLWDSZMEqltPUoVFwhMWqk6r2mQmfHNgylU0b%2FcoCeMkvZsS3FNKRC9p04NaaovHFJWUBnJSUwaSIaqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442d48655a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"62d4fc038b589800f465c645fe7a603b","sha1":"6f559554bbf57572781a077527c95304c9cd54b0","sha256":"686f78c66f4a8e1163160601d935300aeb1eb6c21e5f5b1db9b401b6e7f8684c","sha512":"3d1eee72882659aab1004377c1aa2fe63207a49c66f705d38072bce48ea53d23e49d7de4772d6fcdea9f2e9feba35ee19bfcf9e248b6161c85bc646cc16143e8","ssdeep":"","tlshash":"43e07d0734129a0bd5a2256607768b0cb9c3409650d11e20d183b5ac371e58eeb3e5f8","first_seen":"2026-02-01T01:01:12.964173Z","last_seen":"2026-02-01T14:51:45.714761Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T14:51:19.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 14:51:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; Max-Age=31536000000; Path=*; Expires=Mon, 01 Feb 2027 14:51:19 GMT; Secure\n_lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74; Max-Age=31536000; Path=*; Expires=Mon, 01 Feb 2027 14:51:19 GMT; Secure\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qOpXA2VCUAt1y4BGdTMZdO75%2FQ83kIvgrK9TGYelpOrLp1k%2FYHIVJKIcE8n5IryB7Jt6fYFnULcHMWHybZ0FUQXeIH5ZMS7I5hfIqeVTfVUabVg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c724427080356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26201,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (532)","md5":"ee911b8c5ea0ab5252112f36760907d5","sha1":"c0b12bff1d00eadc3ebc0e4761468b4c18b83673","sha256":"19c8b74fcb099e5024b727624efa9a664f1eacd1f9633e529c6ce3ad4f4c8e27","sha512":"262b7bdeb27fddad960e8e2992f99d92d09f37d07ec0b6ee73c78ac7adfb8bc0fe64e1c3fe513dc810ab410459743f1aa9a63dd97b42ebcdb1bd18c0acde46e8","ssdeep":"384:qn04fpdgLChybejyTF6biki3vFKRQ926eh9j:yILkybejMF6uF3vFKR026eh9j","tlshash":"8fc2746298f719672113d1e52fbb1b053a749003d14acd153bfca6998fc2ec2cda37a9","first_seen":"2026-02-01T14:51:45.715283Z","last_seen":"2026-02-01T14:51:45.715283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":61,"dns":46,"connect":1,"send":0,"wait":257,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/2.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/2.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8380\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-20bc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qFb9AuzggiPEaexups7SQ7hRUD3TP00jHkOcR7Bkc1wZlfZ1fZaOLQfPOKaRN1F2ljxPPskxgPXaIej91j7xAJpWtPESsu2etMO%2B%2BXkTxaou0BkcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429cf995a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8380,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"060925d6be30084b0d66aff07028e21a","sha1":"b826f5881c08920f4dbd6db3b895d66b53d7b36b","sha256":"46fe40cc9ba69df76c0d5216f564befa035b9d197e55b4ef864f43c6b7e5de2d","sha512":"167a594257bd4fcb24ecc8f61629c10040aa1d105a4245b3b8c65e72f58e5b56f9dfb796fce83be2e8914b4287040f761896bf09b78723471e59d89e78566f1b","ssdeep":"192:tLOUmpN+ozNfxSOFd+EpjdO3LOaelk/mjL2TzoN5N3A:VOUm2OFdc3LOLk/mj6QN5J","tlshash":"b702a06b30df9c66d4417a203fa1ca5604aff85059319843b7a43145fe4d9b8ff30c85","first_seen":"2026-02-01T01:01:12.875092Z","last_seen":"2026-02-01T14:51:45.716027Z","times_seen":3,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/4.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/4.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12738\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-31c2\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nhecoi70GRY9qOcPYBudBcbtWICN1Aa1%2F%2Bs%2B7byu1Rl30VK%2BOL1m%2B9mEgyuYyGGY8K1pO1VdTJWkMcQ8gFt8LYIxjcc4Vs8mHOtHuaGeGLOopx7ByQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429df9d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"29e0c9fde43b1365ce6ad774bc69224f","sha1":"81994fa2e5dbb357402e120ee5717de7c7288c91","sha256":"8def49ca94003c04e7b075b0abdd916f8ee88b7386ed3071676f24ae6b9b333a","sha512":"3d7270132a760ce989f53bb1c6d7bfc285f81110eff24040c868ec8a70680d533f31a37e2a4eb84ba7d7f5d72a631f0fc024004d314e4a0e9f0e814033e61b05","ssdeep":"384:huqN2zawyUTPbZx63zQeSEFLgbbcC1Jl5h9H:EqNML8Lgbb5Pl57","tlshash":"f142bf71bd7a05ac83607db7e58ba2ffc605aa40cf476868e016ba5d9b43f200c67475","first_seen":"2026-02-01T01:01:12.938481Z","last_seen":"2026-02-01T14:51:45.716898Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/common.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/common.min.js?v=1.23.25 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Jan 2026 12:34:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"695e52ed-2d5d\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bpKYR%2BVoMbFIsmjPRH480ARzDi1wpfOOhl9w7GEaiW2gIPU6B4izhq2vTjTmJ%2BRaQ04F%2FzFpk27AoBXNcLdnTsAE8QDXzbNewJ1wUBKtt%2BmzTL4%2FQ%3D%3D\"}]}\r\ncf-ray: 9c724429efac5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11613), with no line terminators","md5":"5d06b68551a5fffc54051ca6b4ba90c7","sha1":"725f1d705935da6848934174f5ea2ed2bc3e3900","sha256":"00ea3d7b2cccf5c4ff368d89c8223c28afc016d888d2a5198897a17c2003d56c","sha512":"fe21a49290f351eb4d3f7c79959c03414aa3c4a66a9e05c25c20a4c3320fb941ed912b2c5976cd6b592fb95447fe5719cd1f7a5ba3457cdb906ebf38ce8be9b0","ssdeep":"192:qSuKY27WwSSZ1TnuhgKVqEzjB69FqGdJpyQxD:qdKYhwSUjkLEEvB6zqqQID","tlshash":"1632548e33e66d7507f128ff62217911d025590a3c8ea484782ce996386a7078a7ff7c","first_seen":"2026-01-07T15:00:18.078913Z","last_seen":"2026-02-08T09:06:55.6408Z","times_seen":53,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/button_right.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/button_right.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2976\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-ba0\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gt8OurtvLy3YTk2YFfCWK3qC3hNR2Tdl9p%2Fj3XM4r%2BJuLvkUlEvo8iedtzHfgmN5R%2F9ilj%2Fs1YuiavccQZr6%2FMiVSxIR2j5mSZzeHAZbM5EOkjF1wQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bd82e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2976,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53dab01e29328b67bfaaef8cfc2ada90","sha1":"1371b07d28889b6fbb6c10c99d5e876eaec35c3d","sha256":"cf5f4c0b843156fb6257db14b2b2b48cbd26f9477d6bd87d8cfe423261b71184","sha512":"10614fc7aadebb714542818a7d1cc2d1f226bfc3e19d95d4ea0c28b1ce785587479d59dbd39232a216b2201065e2fbc7a1d885813308f6fd7fac977edc545a95","ssdeep":"","tlshash":"05515d6563c7b8929ce80271731e97d255fd817b627988360486b12c753f4122b3ff6e","first_seen":"2025-10-15T07:33:36.140473Z","last_seen":"2026-06-25T00:48:14.715799Z","times_seen":11,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/sound/spinSoundWheel/1.mp3","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/sound/spinSoundWheel/1.mp3 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 48480\r\nlast-modified: Sat, 13 Dec 2025 17:59:11 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96f-bd60\"\r\naccess-control-allow-origin: *\r\ncontent-range: bytes 0-48479/48480\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSfHGFjii6jtGlebJfFIiX%2FT86ovpBCoRa20xA17%2B1URtaOhAd0v%2BJIbyzVJ6%2FALWpkRWbwyU7PtWMsz7NTAAXGVRAwkuJINsC28iKfzRrWBfNUYuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442c684b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48480,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v2, 160 kbps, 24 kHz, JntStereo","md5":"3c51e02ef27d744fd4048246dadf9d4c","sha1":"a75433c527af8c5e508e653d6067cd022252cad6","sha256":"604debe27ca32451905db26701373f4152f388854abd95e60d8212dcc16e5ed9","sha512":"d5f9b5dfbdd201c3cf009898c91c529debbaf3041a0c95b281af277890e6aa632499a0e57f3f9b3aac85e771578d6398c8ea91c4e79dd5d4c3e058eb0e279222","ssdeep":"768:xt2QmJ+l3wrxa7Ub+xH2ikflIBMeuqVNE2PHo2cRNSQszQwbGAHNcYPH/NBSde8p:xt2QI+qNb+xWbOBMeuqzPrCKzD3cYfFU","tlshash":"6323beca3a7234acf727d66e358f3176da272d495b1050cdc520b282523bc998f4e7ad","first_seen":"2023-09-10T16:09:10Z","last_seen":"2026-07-15T05:08:55.132747Z","times_seen":73,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/logo.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/logo.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28456\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-6f28\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1liDsmMvkR1pShpNv2RgDjDZ62gy0v076bBw3LwyBVK8AUkFtvxM6GxAgn2KaBNWnieDUanUmepL3IUm39NqNnCgurO%2BlQfO%2BgAyeXq5QBRFT445xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429cf965a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28456,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b3187ae0682f95a89304946f2075de2","sha1":"d6cdbb605147452f5433697b8e8cc323ee685002","sha256":"5e4f0562764eaf0f174d4c88ba0e8e0af2c14d72c99d1b532f97b0fdf7b12aec","sha512":"6c9f00ca8b0b0e37cc65fe81de8c75d0e2e1023f38bd127fb23c09a52e9b49a233f0869415e937449baaf2d2c1c6c688907cd832b91fae4b37ce268bf859a315","ssdeep":"768:gr3ytcykw9AUifVA9CLRAODD1eMOL7AHTPOEoafxr8:YRwGUCRpD0JLibK","tlshash":"c9d2e0cb99436cde1b014e74b1254662c9804f9d123a934099e611d4bceff6addd9c37","first_seen":"2026-02-01T01:01:12.949792Z","last_seen":"2026-02-01T14:51:45.718945Z","times_seen":3,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/wheel-en.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/wheel-en.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50460\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-c51c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2HfxLxA4iMFzYc41UOM9rQDFtLRZMWDufm8rOeui4lHgr46hjRL%2B0oSbhxGajPTuJUMc9DcQi87AU9m2gKkuQQDnwfkSN0FIKlqHrUegA1eiZigyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429efa65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4215f9c28de11384e9d64073dd03b0da","sha1":"9c88e70d16e715d47c8cfc759cf6ad7ba1fe8f0f","sha256":"2e635400273db02f551ee869cf1d5826ff328cce568db1b0578aa5f4a9afc977","sha512":"df01050c5adb94baf9e2fdb2b23a48b3892a884654a93f7177bf5f1d70065deabfb81e05632769c7f429ad5a91db36df33315286e2ceee35c2d76dad03090319","ssdeep":"768:ud13YjzT69tRr4C+KA3d+rtyZ3aIs171kOCAXWiMTAHSgKj7kPCvka+2JXmBXF:m2u9tS1B3d+rtFjX9MTAHKJvkTXF","tlshash":"f033f202a165f5188b5c07d87f10733b8a82e0f7406dd3da46825c6657debcb9fd4197","first_seen":"2026-02-01T01:01:12.913845Z","last_seen":"2026-02-01T14:51:45.719784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/js/app.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/js/app.min.js?v=1.23.25 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"693da96d-0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQVBLf1%2BUeuf4VQJjFhQLzHZVmoGe9rkMR6wI5fu5FafsZBU05bpjgDRj80NbHVdbkVyrt115cbwbW%2FGGa1A%2FgGkgxMsfGL9QdhOgb3y%2FKDD5QTSUQ%3D%3D\"}]}\r\ncf-ray: 9c724429efa95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T04:51:57.63231Z","times_seen":17880808,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/lightning-down.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/lightning-down.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 127682\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-1f2c2\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13ZREs0nitEwLQc9QGoHoQsYasihx4UsHXeoUbrNww5IcyNOMmsStEv69iNhsMzNGkwJ%2BTONaOtptzTSO4%2FjPqiNi8ScSFNKKwMn4e4JqMMJBGGrfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bb81f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46e7697c52cce9e12c28c1345e0d98ed","sha1":"e56550dc253093d434960562fd41f54c8f39ee4f","sha256":"8eec25d1d99021a53261e86fabeccb82dfe5c98965474ff30e1e21ec687f9623","sha512":"a82c954295758f0b7ca0ac8364807dda3a90427b483f8228d94f702397d30cf09b57bc81c0ed72c1a2af0721eb6674abefec18d62365ce740620ab076681c872","ssdeep":"3072:Q7kpj/To3BwvWYwxzw6wGkS9jr+wwD9SrpBATD6Iq:uADs3+/6wGkShnwkX8Dhq","tlshash":"42c312cbc691183671ab206914e5a5492030d40cd45e7d16ab6e8e3fcfc7ac6e6fc9f8","first_seen":"2026-02-01T01:01:12.899648Z","last_seen":"2026-02-01T14:51:45.72164Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/button_left.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/button_left.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2928\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-b70\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zqIlmJKM0K7%2FDxW6CXkOnz1wy4TJHu9QrtqxT79h7mBFhp2ShFDxUZl9Sy5Lz6kNn4HE0tDPZjqAI7l59RY5Hg7YdR1WKPPeYJChEC1V%2BjsP5QwK6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bc82c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b707abc911853fe34619146badb71dd1","sha1":"b332ca8362aa6fbe9e4781a5e5692b37fe8539a9","sha256":"05d5d25ac7ef69aec56b016a52257a6980b8c39c19405646eef7aee0d8005cc4","sha512":"0b092a49d6709c8c8afd5fcaa334b47c98bb1e782669bb4f6cf87d2ad0fa33699c280c52f06432ff209d3fe95fcc06e067b91e650a3a5078c839611cad7be7a7","ssdeep":"","tlshash":"fb515d1ca0275b3a884062723db29740c46371efd65dd6314d6c4195b764d3f67432dc","first_seen":"2025-10-15T07:33:36.105007Z","last_seen":"2026-06-25T00:48:14.706636Z","times_seen":11,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/5.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/5.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17998\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-464e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMmR34VQPelEZQSywZRYjhQmCFCKOs63McPeevs9eF2LEmOxuVtt5eDDuk0986mqHm1aK2esWNqqN8j9bexQq4kPzj0GRCoOrfJ%2B2Tr0JAzMf%2Bj99w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429df9e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17998,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4927d1f801d50256e6b9383cefdf15e","sha1":"ab82e948bbc729e805def4bc575a17c8516d69f3","sha256":"56090b2afc4b17730d4296ae612c1fd14b91845636ebbb3e8dc5edb1e98c383b","sha512":"0b745c25de9f87f3509e87fc3005b72232cb2acd4c62c0f9f8064b11d78d790d32cb3f5309ba24387bdf3e932084268d05fc65f63905b2fc9191a72a13e93379","ssdeep":"384:9dEada5FDUQzRzfkWOFDw3Lw+2HPcZYYwtma57ZRaDV3byDWW/:w55FDbRvOJmLwBSYn4AF/","tlshash":"6a82d1759b847d46f659b08703932779af5712a6ac1ffa2cf32be08006f40d33859e49","first_seen":"2026-02-01T01:01:12.912552Z","last_seen":"2026-02-01T14:51:45.723186Z","times_seen":3,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/5-effect.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/5-effect.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4400\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-1130\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dSRb%2FlxIq51Ve4rwmlxUJRYfr9op%2Byad%2FCxSNhIaXwf3HWGghNmA1VGqQZ4%2FzBTKGPnEL5szxDRQnZp%2FCRDw6%2F0NOkKVoqGgVcwSPz%2F%2BQ3x6HtOMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429df9f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e86a58da3e85ba81af668a7b1abb482e","sha1":"3795c2d27369bd9aac93baf65b11120c997b0178","sha256":"07ce9a13d672fe0a11d43fb2c09b4b4ef3d43688d5af86f3eb15953d2f02deb1","sha512":"7ab75c1639ebe3831c0b28fb8af993e39f0e74bd6f67dbf31fac30591dc9b9eeefd2c4020519816821f708ff8c738dcac5ff4cd81b478f63d1feabf8fb3afca1","ssdeep":"96:jDLyb7CM6yhqPJIHr+dktGfBaMIF+Ma9u2kIE9OPptaEYI:jy6M61hILCyC4gZtNZ","tlshash":"47917c686d0e16ad21c040836ef4a6fd1709ff6c452079f0aad1a8d44433f99bf52c61","first_seen":"2026-02-01T01:01:12.974748Z","last_seen":"2026-02-01T14:51:45.72374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/10.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/10.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14428\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-385c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUntgQLgLBjDm%2BGhLMRGumQhyGoVac3jr1T9E1bCn%2FPertu738oozf5egT2Oah%2BXX%2Bq%2BFygBmWi0apekVfbEwLYnw4spkBiDj1RAQfu63QhK8Z7dqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429dfa55a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14428,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fedd1647485fdbe8ad1b4ef7a3252d4","sha1":"624723dcfe35e63899319395e0660443e5af2d0a","sha256":"99a71b6fc86f4840ff94cc30a6976c1e28d5e7c0ea767e89367e1c29313dfec2","sha512":"4651d48055cb13bead484dbf93a133cb46cc10c1cd44487db27d8a3583115ea8acb94a3525d81e73b23c90ff944f8ca6b5da2bdb4c4ed0dee95dc28e01debbf9","ssdeep":"192:lmtx/DYq6KgBOeleVQwNcDtHyprqtCk2qpYK2mMqMGbvo1ghBt58rlB0jxILuZu:C/DTYtehNcDtH2+c+2KyMAahBtrqO","tlshash":"f952cf94a19cfd46b21ad33d676c36099acc644f60a65264d02bbcc680ba7c0bc6ccde","first_seen":"2026-02-01T01:01:12.940427Z","last_seen":"2026-02-01T14:51:45.724313Z","times_seen":3,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/left-person-effect.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/left-person-effect.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65656\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-10078\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROSoHSNoAUEoNwtQs4quGAdG05cR2xdQNyjoDH%2BLtIC%2BXIr8KPq9FlyRFcKbu2wydgCX39ArM88KQGN%2Bk04kf4SsiI3IGYaei9ZbQc8HQlqvIQRQ1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bd82f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65656,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79cb6f15761daf0856013b54a485dcb2","sha1":"bfaa7e19465969792d7d503244b031b447129a48","sha256":"a9c59867e2503f3be064a6ae6fb5324b4aa6cc570b8714b93cb82eaa941b3b48","sha512":"922449330e985b0f14b6290c52d11cbd5c152d34a0ecc914bfa23a95c0d55d7b59529b4dbec26682e7b04f0843d279e614df4e17020e145c43bd4e261efbaf4d","ssdeep":"1536:QZCznsNMj7WxCSixaTQTDFLcpOQ5tZN8y+LYV7i9cI1ehPY:rDsej03T+DFYl5h830tm","tlshash":"975302af4383c5e83ed919744a804b8c26cb6f28116735246fed51e56392be144dff8d","first_seen":"2026-02-01T01:01:12.95444Z","last_seen":"2026-02-01T14:51:45.725305Z","times_seen":3,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/reg-sw.js","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /reg-sw.js HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 17:59:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"693da972-14c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlmtKLguE1bsFyaG0NX6Ubn8R3%2Bm3x9bLVbNppi%2B6OWUqsMWsF%2B%2B5LmXtxSnsSNBFACMF%2B5%2FYwAl%2B51OMjmKvOHV39xWFg5foTWCsyx4BqwRWQriGQ%3D%3D\"}]}\r\ncf-ray: 9c724429cf945a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"96b9d3799c9fb799e1f471ce25a73e8b","sha1":"63ce3352dfe829cb431fb38873894e5379733d69","sha256":"147bf5206373d93ce9743b4af186f950831fe8cd3eade77cbc567e8ecc2b1e1d","sha512":"71c8dcffdafdb84cba5421895cee65fa760434689079ad9f36c2e0c8a616e32fab9ff9d0a86a3a45f878d4029771f3a310a9d6c7fafc5cab4d1c4bd7451d95e0","ssdeep":"","tlshash":"8ce026568dd518370d7390668f07730623af41838084ca657bfe87502fc192a42ab8d2","first_seen":"2025-06-13T21:59:19.284491Z","last_seen":"2026-05-08T10:42:36.620464Z","times_seen":243,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/1-effect.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/1-effect.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18854\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-49a6\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2F0LEOBQU8rebiqCRhj02Alk4WOSVFzLbnWcmtEJMJx410dylwfLiP7mKomYsDy%2Fvf2Arn4dd9uzeUKw9%2BbkThlX%2B16tGGNlrjaTGocKOPjxlwfyYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429cf985a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8fb3afe55b4ce7a0df00f4221ef908d8","sha1":"5eb6649434ae668d581aa77f5e31e31e568c4b0f","sha256":"7bfe016ecd9b7473f9bb3238beef001ecaae5867c1e1633183ce4653ee25f48d","sha512":"5684ee52130522ea9588a68be03a0fce1ea425a6555eb0ec283a73a67cb55f16edfda1d49e62d4e48fade7a3230f21ea97e7a7f74e6955360b81d9fe5ae7a5e0","ssdeep":"384:H0RFQGs48kA6IqjtgQm2wKI+iYQEbDp38d+FajTyGGq8D:EFq8RJgQm2LHTDscajTyR","tlshash":"6b82d0edf63428401aeee47c85f489c12de4955b06cb4646c44aab6347b2068fb6d3f7","first_seen":"2026-02-01T01:01:12.957942Z","last_seen":"2026-02-01T14:51:45.726384Z","times_seen":3,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/8.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/8.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8262\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-2046\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mB6hmSaBY%2FpgiVYC9tpINFNZiiN3rfJL9kt3CoI3Omfrv1oEkF5%2FYNlHr%2BXqu8F%2FShtkx2t95VnshwssTlqVUodvj0I8wc9SXXZDPrT6n2%2FweZdzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429dfa35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6cc2230cc52301fd906eebad30ad8dd","sha1":"a8cb80fc4e6cd1af1864e679a957baf46e7b34fd","sha256":"b6f35abd254ca19bf1efc91c240de90cc24cfa42d7c96b71b4f35b92bf7beeff","sha512":"11f56cae273fcb33a00e86d20044594bb803283263d97ae5727a652564cbad39462209d4c07604146660a8ebe03df1e23702243753fc5acd733f447e54e7b1fa","ssdeep":"192:k555it6DSZNy9mV1MEg975e7qbGdZuYTdy7bOymiNAv4q+8AcT:k55IESZHvTi1qQ2du8iNAv4bTe","tlshash":"a002afd0d8eae0b8ddf7d25e2d055ee0ff2b88e68537551c1172494201f2a82dec5f9a","first_seen":"2026-02-01T01:01:12.965457Z","last_seen":"2026-02-01T14:51:45.726957Z","times_seen":3,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/9.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/9.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9212\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-23fc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hr2Fkd67QVOUxLxD3nQ%2BZcOEDuil4X4M%2F1nSxzz%2FyOpTSXL3WwAKQOliuajj20oZtA6yKLTo7bk9ll0r5q4rW6p2De7HjfxtEBDnGNwwUyhhA4JyIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429dfa45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e126b2d9aa6cb37850a01435abea5f2e","sha1":"d0dfdf3354527ad3682dc0f34d0cde6dc73620ed","sha256":"4f510003ec99391c3e257cc018eb14be16a64fef6cb30a23a145b7e614b99733","sha512":"29bd897e02425159ffe3525f5ca2ffef105fdf40a672bcd8ba19431ed1dce76a1c770bd560e23ec7f1b127971c5538825e185a3c41a389f65890db0cfecb8358","ssdeep":"192:l2BJzlfCUoyxlh5Dc9yr6C9/3Yqg7Al/YPKsgRdqlC4bcyMy:livoyxlhNK+9/3Yn7Al/YPKc1bTMy","tlshash":"f312be01090b5b8fdde9912075844804a1cab6fcfb235e23aef9457ac53ca2cdb08b78","first_seen":"2026-02-01T01:01:12.878334Z","last_seen":"2026-02-01T14:51:45.727535Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/images/win-effects/win_sector_effect.gif","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/images/win-effects/win_sector_effect.gif HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/gif\r\ncontent-length: 96222\r\nlast-modified: Sat, 13 Dec 2025 17:59:11 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96f-177de\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZzdC%2BJNAYLC1Lye0Z3iKHiT2CAIYOl3cEcLHtK8fZ8TgiVudIiXPlXMz%2BiP%2B1ZsR9m%2B6VY2ptKDAg%2FW6s7KRdHHSCCbZv5wuewk%2F79d1XJ80PGVwpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429efa75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96222,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"8d6e9e9014b05034a76fc11c441039a9","sha1":"422c742887c4bb772804490ff0263c57af4875a1","sha256":"4c4256b3095fdd8d78a5d644b844919a951708b47eea8eecc811a40c9bff2b77","sha512":"fd9425e113d3483fa931e5685d36f503aa8bcb62718f940f462eb683c7c87a031f8df7a66f23b5c3d6667050f10c91a91890c7ac33d0bb6a1ab327c7a457890e","ssdeep":"1536:VijsyTqhTem0/CpIXuDgjx6ra8fmyHwyzXracPtAYMsMjLtqrxmNtsLM:YYyTqBx6h0vOaVzXrBAYJUOEtsY","tlshash":"f39312bc83196dc9a13450f1caaa00798d1b553a7f9460c5ef1ef544363ee4af2b5f09","first_seen":"2025-09-01T09:07:23.026403Z","last_seen":"2026-06-20T22:08:02.541598Z","times_seen":105,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/uaParser.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/uaParser.min.js?v=1.23.25 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 17:59:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"693da96f-5420\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MLaU7oJLunlgraUeAH4KFxPMZVgLqgoLtawmq9RPzqGOkJcVZjNC6WObdWjROPhtbtqNBboncPo6WGtW%2BgD1JTBBUI9t%2FfqajtVkJC8twRznNZ9VQA%3D%3D\"}]}\r\ncf-ray: 9c724429efaa5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21536,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21435)","md5":"0506891626c0d940464888ac2e1c12f3","sha1":"ff48ebad4bac1d5a51bf1e6461e1d92e0e60614d","sha256":"9400fda80a27af142fc2e43863688e56befaf7a12e3fc78f04a103eb86d78554","sha512":"afb95c16b5d252e29c85af01d6aeb4db98fcf658884f7b6294012632d0320e07fde669769cf46362b1df0d9df037e28bb3010c705e78355f2142a0cc189fcfae","ssdeep":"384:0p9M53S7Fwb/6i3u93oRBr+dAHAKzoBvN2K6HDY9rsKTHsk9:0p9C3Hyuu9YRBKdwADNmDY9rsKTl","tlshash":"a9a2c93ed365bf2083bef599c51790002d3a9c2adb41b4f9dae47540e8d68b1229f772","first_seen":"2025-01-05T20:12:01.773233Z","last_seen":"2026-05-08T10:42:36.599326Z","times_seen":272,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/howler.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/howler.min.js?v=1.23.25 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Jan 2026 12:34:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"695e52ed-692d\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2B%2FXIXyblFJxIfbCxiKdbI%2BfLc3bAezfaq%2FQ7a3E753YCkn4yhLS%2FAf3N8%2BdOjl2qkt9WpLTwFwSxBfbq5EkVa%2BazAssiVboYWWnPdMrjSZCr3Bk4A%3D%3D\"}]}\r\ncf-ray: 9c724429efab5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26925,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26820)","md5":"35b05f6bdae4d21f9e7605c3f694618b","sha1":"b6372df90319b4a09ca9ab8bdf7aadb256340c0b","sha256":"80b9d4fdbd3210509c00b74ae93d624461c419f9b35914ad9d5a5a73f9f27aba","sha512":"c57cf319af996816455762cbc1a910a80fd4315cf1ae7ecee628f203734945386062726ac3ade06401b98cd2dec70f877f7d482312e4f2ec6f040650880086e2","ssdeep":"384:FcZaGJ2y93cl6oStbVNIvablsa1hYxD+NvJ+fdcBs0RG2Y:mc8CmCaltoxDY+V+sUE","tlshash":"88c21a4c77e1bd24839e30a3323f4a027b721a17145e6650f516c1e67f68e8ba07de6e","first_seen":"2026-01-07T15:00:18.077321Z","last_seen":"2026-02-08T09:06:55.646747Z","times_seen":53,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/commonBonuses.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/commonBonuses.min.js?v=1.23.25 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Jan 2026 12:34:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"695e52ed-c09\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6Ypxrs4IXxm4ej1tZlWMx%2FaAXLKAdMImq1wST%2FK8i9VrkMWJqcFPbiq2kWNo7%2Fi62FsAb%2BAnTrVzcFHz4gFLshnAP3uMBbwvD3rYtXtzC4Ili47YQ%3D%3D\"}]}\r\ncf-ray: 9c724429efb05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3081,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3081), with no line terminators","md5":"9f49fd931045373ae28f946777c1c2ec","sha1":"01c16f7851d5285f951d373941c2d2ea2f2130f6","sha256":"72b8d4c7f274327451d034116f87b6faca4ac50dee8ab7724c4b2111c713c63b","sha512":"5e1e78b80aa1e8565d9e740eb72a37b246e2142f02b17cb7692b516bb35e09979607bbc50a62aee9d1b63005366b1354c972fc1422d03a1efff42239cd4c0afd","ssdeep":"","tlshash":"dd51ed9db64a68b9469e14d63bbb13cb5615bc413d0390805d3c9cc13d77b8242ebebc","first_seen":"2026-01-07T15:00:18.072433Z","last_seen":"2026-02-08T09:06:55.657759Z","times_seen":52,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/3.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/3.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10306\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-2842\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aJbB4SIFiHZCjavD5cLS3pJ%2BiSZpMiFrHrYpLRyKSsEoZjb6kgcGFfIJrWOYKwScIKa9EDvc7sNFh%2FjJKJKs66IpvhxrS1S5gIawOtq4iNeMUrQMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429df9b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6868ddaafe164a96d7583da369fb5c34","sha1":"34442d5c6006cabbfb1cf183117208ea500244c5","sha256":"a48e9de5814ad019d35c676e9654eb3ebc142bf0a6e784a79301fc9fc61fbfd4","sha512":"8b553a6fcc7e6041944862db016e464d63dbc415806851d07d7c9ef93b24fc586a2853f22c9b23d05abe56a06d4d1aab68f045e85535efe6d30a1b4ef623e00a","ssdeep":"192:0qkWyPzW/gwEReBaI8tQ/teMVeEFB7RthhjGVjEa:TkWyrWkUBaIPPeAl9","tlshash":"0422d0633243c2e82e0e756e7fd15f1069eb76a991dc8ca15e9c0e13972f79600d5bc0","first_seen":"2026-02-01T01:01:12.876947Z","last_seen":"2026-02-01T14:51:45.730958Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/images/bonuses/red_box.gif","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/images/bonuses/red_box.gif HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/gif\r\ncontent-length: 995519\r\nlast-modified: Sat, 13 Dec 2025 17:59:11 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96f-f30bf\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNGH51Nj4%2BRjIf42fgCd1PGWJI4yeYRiWbPaRLlQXOLBtl1%2Fb0AoszTyUm%2BFgMbtH%2Bbk%2BYIAzml58qjbnbWcjHim0jyoIZ2a1BkcD%2BwvPJUDvtptQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429efa85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":995519,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 500","md5":"0d7f5f65f467bd429b38b0bb040856ef","sha1":"42a6fc00d475abe9b9c9373aa3fad2a007b8067d","sha256":"5e653f6b099188e2db46f4623180019c2f7046872544549e821487d33aa79ab3","sha512":"cfdcf1e409919d2d0abadf953356ebc2acdffe87578d903f1c5e56817ca46a8ed55ad12bd116feed9754fec4db927a9699d36c2cd20722b2e4aec5055f14f526","ssdeep":"24576:qDBFhw9P6TQ1e9FIudHAsV0VDkCUhiByhK7uFx40RD:QBwQkwESV4oCUhyyhZFx/9","tlshash":"b125334340060316f354f8723ee6a59b754c88ad18578b3cca5bbba7ecfa01ee950e71","first_seen":"2025-06-13T21:59:19.279899Z","last_seen":"2026-07-26T03:14:03.210764Z","times_seen":52,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/commonWheels.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/commonWheels.min.js?v=1.23.25 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Jan 2026 12:34:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"695e52ed-158f\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fim8qx0whhGGi8iYz9qrq7VYoWJ7qiw0oM6ZaPGkgZl6sVLx5GiO5iJElJ3vQXcQ0D8dyRp1M2ndxWt37Dmj1%2FNglQCF2P8pj%2FJE%2BIdRiG3PiRuBiA%3D%3D\"}]}\r\ncf-ray: 9c724429efad5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5519,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5519), with no line terminators","md5":"50e346776bebc5d316323a09f6eff9cb","sha1":"7a560f72c23d457e5c49fd664c342eff83feec6a","sha256":"d7a596e29ff6a29cd9f1057533abe6ce724b184d092511f3a5b8f6522c39e565","sha512":"c83aeaf5f256dc544764ac3fcf59a0eec7c3a8d65410fc83c1be38126f882a3e9ffb92dd34f10f16748324545f68979fde7fdc5e417fc4edc9db3f2b92a045be","ssdeep":"96:/7lzAVgKn6GE9+tvfvcymNXDX5KpovQHJc1U0dQVcHLbX96jhVVDldwICtSumMSC:ZAjnN5vcyEXT5KRWO0CVSLbN6FDlgLSC","tlshash":"36b143ea365a3575429a28bf43b73553b4a47d117c42f8c0102ca8493e7bb45503be3a","first_seen":"2026-01-07T15:00:18.067352Z","last_seen":"2026-02-07T14:50:21.82328Z","times_seen":14,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/page-bg.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/page-bg.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 80374\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-139f6\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2BdIdrXA5aapcTS0mIG0Y66kJtAixoPut8dlLHmwcO3oP5SRxWm3Xe2eCweTch0EViV3F%2FGN%2Bvg1givZ4t69HYzyiRV%2FtwhNpUv3ZEclQIAk%2FNkqIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bb81c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"882689ce258f97266c31856c2cda1193","sha1":"b8053589b8b0f40f2cae1b45e8cdef63243c37a0","sha256":"b13973c58fb2f21c45536f1764c2d5c54c870795ef2a5822a74d666df443a28c","sha512":"4892133e81ca60a366f270029e157e2c3f311c5db32456078264ab513b8ed4e5a885c361f381d3195d12ed3153817b5898b92754c0b3bf6da51f9116406f957e","ssdeep":"1536:e2cKVKfDkFvvvWRLG8TArDsjd8cvQQmS7MMT4dxU+ZzuY6:MK5tvvJ8TIMFn3T4PF6","tlshash":"2e73027e2d74b7ec858f9557245475b06f88c8968bc861f2f8cd8b74ca0d0cb90ae8d6","first_seen":"2026-02-01T01:01:12.887709Z","last_seen":"2026-02-01T14:51:45.732639Z","times_seen":3,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/lightning-up.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/lightning-up.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59664\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-e910\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fsF433HYZeK7HsmtaErRp9ReoLb0iSvGnhvXUSg8l2Oi%2BZISEgAzEj%2FLF8Yvs2qsdeANbgy2Jd0vjCDQwktUIZMNOtBZTjfM0PScyBa59GgJt7%2BfJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bb81e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"014cbda25700919c27361ca0c7737228","sha1":"9ad0e73039ea3f357f0b7518d914d31ad28cfa5c","sha256":"c5ff8cf9765267935fc04043f23d64095dd37defd2a3bf42d07d63f02bdd6cee","sha512":"906ac30e77b0025570f6b5924183bc3e07dc790e21b04e17c5da311fafdf30a0fe6fa3728a77885f0e0b2223931ecd82ef79511d62d0adfd9c2b9164273584fe","ssdeep":"1536:2p2MD3tVxsxht2BZA+VJEwcqWIh64kAJj0QGHxFdBf:2p26LxsHt2BZnVmVB4kEj0zxbJ","tlshash":"3a43014ad1eca1656ab668b00a50852a475fe41dfce4930d511bebbff708fc0c1a77b2","first_seen":"2026-02-01T01:01:12.94809Z","last_seen":"2026-02-01T14:51:45.733472Z","times_seen":3,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/flare-2.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/flare-2.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45108\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-b034\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKByMdHBoDZPGKMaLAiHW0PH4sVp%2Fkf8OQ00UP%2BR6LpybdV3gMZOpuxyC1BLW6tL0SNxCL0Q2zDNffXiKyTh0kIqabP9S4c%2B0tdEqFJC6VS%2FW1E0zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bc82a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"859f063fee13de552c726d19534f3d75","sha1":"eb1002b8227a0d37bffa1c25b65a6421913b91a0","sha256":"e62b1e52fd7dd174a46959c75a3aa67e25ad649dc144c3e2a178aed0dfe18de6","sha512":"a472e24939697d718d3430b3c39cf0c6fe43e6b188efcd0a5493de9e8482df2f383644217d3f4091f1276ae76db02cad31877fadb6b930aa7ac2c2fa41847811","ssdeep":"768:3sA/bpl4ivUUKj7XGl+GJtK/+5GiKADlY4z4ykulkKQYMhQ1GJsjN2W/:3sA/b3WRetKmkiPDuHykul/dMhzJmN2w","tlshash":"c313f2253938462b60f162958ccc28d4e95ad75f00a5edecb33abbbe8c886575f270d4","first_seen":"2026-02-01T01:01:12.971304Z","last_seen":"2026-02-01T14:51:45.734011Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/css/style.css?v=1.23.25 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Dec 2025 10:19:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"694283b7-513c\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xv%2B1hOWlJJH%2BFroE2KjLPf2lenPxy9gTwvnov55qTeQRwdnyQLDrPL%2BiS6PYUEPEAfNZAgu%2BvmZjwLBcDG2boZnIwUFfdO5x476%2FsnWBZYuuUDt5aA%3D%3D\"}]}\r\ncf-ray: 9c724429cf935a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20796,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20796), with no line terminators","md5":"ea476bc1f87c25d958ffeca4d47463d8","sha1":"e35f36ae523d071cd5e868694861568ff2f415b1","sha256":"1aedc73cb9ce6f16e483ff0e46ccc3f3136121658ffdfe62f69e11839be4b5c4","sha512":"191d9ba315684e364d5a380e934a404cf96a3f9ed1f5135003e2ae39bf9c9afc3058be53fb36fa05eb36a3848b56a071658daf1dfceae876324ed5bf15d89dc1","ssdeep":"192:OVvD3PnrHtyDvJlxi5Z7lRFy/QUsPkiQxdc0y1u:OppytinycPkhKu","tlshash":"a99264f945253dafd19b867371eb17b44538ca83e6921e6f2275962d83ca0f102b720b","first_seen":"2026-02-01T01:01:12.934294Z","last_seen":"2026-02-01T14:51:45.734828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/logo-effect.gif","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/logo-effect.gif HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1220035\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-129dc3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vo1n42x%2B4Qej%2FW230I9M1MDBEORbpOD%2B6Ib2m0fkN%2BTkrgApl4FlpWqWLXY8iQGmvgySs4Ak8wkbCAvVFzOflim9gBmso5yB2kvFB7viqSNyQXXSGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bb8225a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1220035,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 654 x 242","md5":"b6cdb97aa2ca48b97e51758b1c75266d","sha1":"15b6237a961a51577460cb96a120295d1b3d1fcd","sha256":"6586a3f9cf86acd23e3d5bd82605aab7f289a80ce5bb7ad141db7810aaebb27d","sha512":"05732bd085f426c4d86bab7241609247d5c6f2620663d1fff5cbfd00d7a967848687083aad64bb58af8ebfc2749e55c9c8722259f707f0126c7bf959b2aebbd2","ssdeep":"24576:UABC000QO0007000RVCqjVe0000ccp1124Ne7AyAyAyAm11AyAyAyAHaYfQH+f1k:UAk1B25AyAyAyAm11AyAyAyAHacQaTAZ","tlshash":"9a251249ee3fa281f243b13431881925ace3f16d9275f974f854ac9fa29b5f8e2d0d11","first_seen":"2026-02-01T01:01:12.879679Z","last_seen":"2026-02-01T14:51:45.735947Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/flare-1.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/flare-1.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 154432\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-25b40\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4PI9CgB1%2F6bzs03umrW680Ysg6ToVa7tOZMNZ%2Fo9QYutAG68KNy0VfDgOsdFmwAijiRmKZ5PA%2F0hycS8Kz6hCBwsPv2AAI514MJANaslOUbg8iyKXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bc8255a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154432,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d67719be8c44829fb261e308d6ecdf2","sha1":"6cc6683158326fdfa039fccc657aad66e539da6b","sha256":"64098d4b89beaaf9912b76e50a9fc7aeab842299a60b4e8c15a5c3059df36dc7","sha512":"6926a36065029eb4f1c36dce8d67b2cff5e6df22eb9d981ea28dbfdadf1b5f9762f12476dcaed7942ba915e9fd42906d3d4019af85af94aa266ebac9e1e5413d","ssdeep":"3072:tzlmmS6NV9XPEz1BxGFSyn8jgwcNDjJziSImYsOP7xXR5rrDlCWLQ:tgm7lXPkGFIuINxHPJLQ","tlshash":"4ee312c7d6ad5b6e49cd4aa5a3b8830e810386f1f7ae7088d13f8792dd451ff8570029","first_seen":"2026-02-01T01:01:12.92947Z","last_seen":"2026-02-01T14:51:45.73676Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/wheel-around.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/wheel-around.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38240\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-9560\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xW3tuxLnRg17F2jvtC3LAs2gHeoEkueZytHNmFWTiStJd2Deik8Tsv4lk7WMUZxYawj11ggv%2FLSEgeMnLHGSVXi6%2FKuASfCJC719xR%2FEX5SOxrXkow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bc8295a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38240,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ff5b414d4850d118d094a2dc3109b9c","sha1":"09a5e4040f72838f15d57a16bf87d2c250fa1045","sha256":"d727f5ae18dfd33d7babe722a34dfeff84e7b5d96826bf28c3e8bbed4a7dfaf4","sha512":"31c80c92425137c3902052c5e24bf7eb018b057e9fc0c84f2afc3cf1f50f66541f357e32afaaef1ce808b78abb8abdb1cd08c0a912a0349b56668f21b5d95ae5","ssdeep":"768:E0H5UQTqu52YNtpQzu1N0E8/XBNTiV8xGzqfDYPHucjLyOXJS11:EgUQzESN0EwBli7sCu0LvZS11","tlshash":"0803f1034dcc3d504e2faa388aec3a999407c38b8d9440fbde9bf5851de8db7a541657","first_seen":"2026-02-01T01:01:12.952949Z","last_seen":"2026-02-01T14:51:45.737301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/6-effect.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/6-effect.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2876\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-b3c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91MJ40v0NnQ5KO2ADa1OnVb6%2BvPgK2f1MP6%2FvN620OmiT%2Fgcxe2ExAMaJxrJVk%2B3dni7kBhLOdIV4Tp1s8S7EkPHFYYTB%2BZja3tXgt7rogukuGxVWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429dfa15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5bb802eac71a2081511a6361c2b12158","sha1":"83cba834d382d665449359592bfd53a8c9f8c77b","sha256":"8ae977be9d3619c314ed864a8dce88397ed60f8e95c7058f174ab5ea83e69758","sha512":"94f7dff1e3baa9a401e3711fe4fd4a3a28e9356cf74a5a72b69f6a80bc410c1f61968091f5ec90ed8d848b421819233c7f95ac0f01b947a25ab5caff1dfae8dc","ssdeep":"","tlshash":"4a515e4333892c30945c576c81dd12f3c45491b0bf5a5f2495d4b96a37997e97c4694c","first_seen":"2026-02-01T01:01:12.951402Z","last_seen":"2026-02-01T14:51:45.7381Z","times_seen":3,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/1.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/1.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13798\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-35e6\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pd7GOUgRdRrAUgCq3gIXBzLtmx%2FIylcc0E0qm5FcxbL7e6jSJl4LLXXCa1B%2ByNVKNfRZvO%2Bknpuy4jytUz%2BWA%2BqZklxVtcCYQAiKMKYlErxn%2Fo5BuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429cf975a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16c75cc7b4e9db7c28ff88e2adb65872","sha1":"ee02dbb47944a0c5d22d360b3e94d5a984b72e22","sha256":"37d9f670f109e9e40cc334e22f2baac3cf961945f599981cfd168cde3c1c7d63","sha512":"ca4ea8c25c3f1bccb01efbffa41591d14d76e89f46404c431043b0a6140f60229d9eacf1789e2c8981381fe95a63873dc82ca16465a16bcbc8b5db6446f65a56","ssdeep":"384:jJWfH/kSJdbVA2SqmXs+7aiU1J8JcmJU3q:jMfHrFVAjdzaiU/jm3","tlshash":"6252d0904c56e73ae152797502c8785d05e27125e1f5a3bccc3f86848ea4bbf7469733","first_seen":"2026-02-01T01:01:12.956074Z","last_seen":"2026-02-01T14:51:45.738678Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/2-effect.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:19.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/2-effect.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2326\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-916\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uvq5HjmirRNmIYZl5WVmH7Jf3zNKcuQtb9o1%2FqmNhSE0uRXAhJA4OCbIiORJiV%2BoiM%2FiOyiLtZoel%2BBXXpAQ1NnlCFq4WXAG80u2X6p%2Fes3G8%2FMLbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429cf9a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2326,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"614195c3b83cdcdaad5e6291d957488c","sha1":"e7e02977eb7bb4da209b2a25c4876039e3ddc467","sha256":"eb7494d06ca4e5d370fecaa788515bee99a37b10b918f2dddae7217e806b74f0","sha512":"a983f8b28d69dd5683dc31fe1c65e1e11ba51b30b9253e04be564d5865c1479c262343fa7240a9f188ca681c54f14cab3fa887c54d4927d5cd27c0f5edcc6f41","ssdeep":"","tlshash":"43413d24dbd3f84e2c47f5dc8ad497a59c6c2499cc96051d1f451f58f731587b326311","first_seen":"2026-02-01T01:01:12.959385Z","last_seen":"2026-02-01T14:51:45.73918Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/7.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/7.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8006\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-1f46\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6JkKfEXeb9qyjB44%2FPAmMhIacGKXB7O535xzLVZmpXkEJ%2BVUXOjPI%2BJcUQhtbQzaOz%2BKQVRLb9RCpYDRl91j2xs%2FwOMF8NHePaK1wS2yaf%2Bfm5v6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429dfa25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae8787545cb436a7d7151181bac4c873","sha1":"78b57ddeabe73c160be5b8c429dae7100d0b2b2a","sha256":"fdfd60bc5d076e8ba2ea6067986ed4456a246029d61139ae028a255f69bdde81","sha512":"ae19983fd728f9734f6b5f248e17c24c72cb6dd8f24a2a42b7e1fac269f913929ecbf236222b41c56da8643308e86b2156e88f54985b81b44672385ad2c5249f","ssdeep":"192:7KdreNZuI+QgMsKJTPf2KHitFrHE0KWvn18kWYRR30ZqiT8dc:GdreNZzBiIT2KCtFrHYdkfR3CqDc","tlshash":"c7f1afe353185664e62163b5ceac33556b012bd7ab0107b2782b0c1ca732cf59df4ee8","first_seen":"2026-02-01T01:01:12.883228Z","last_seen":"2026-02-01T14:51:45.73968Z","times_seen":3,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/eventsPlacement.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/eventsPlacement.min.js?v=1.23.25 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 17:59:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"693da96f-cbc\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CR78%2FfHX4%2FT8hhI4OZZNA%2BEYJd4BhJzMMLh%2BvAOwTVyXBotWllDbC%2FJLRizc%2BN053CP1PUQGXGTSInOpDM3ozBbOSdR8YYsFlXHJ96WWOizdSpI8sg%3D%3D\"}]}\r\ncf-ray: 9c724429efae5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3260,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3260), with no line terminators","md5":"0cf2e2db5eeb1fdee13c58f9fbf6d10a","sha1":"f8b0bd1378f81757bfbedec3a5ca1937c31b92db","sha256":"dcdf284d2d3d815225ca4e9a9bc783d1b5eb3f6c08abd73a292bed2bab758e31","sha512":"5fda356e9b2eb9986d54a8a997ee31cdd9a3d4e95b1c19a5114abf6a5d8fdc2360b8eae6d6a30f19c383087cffd24f4436c79910ab347c4a1b603cfc8ce461a5","ssdeep":"","tlshash":"476145ca365f319042aa95fa6357320562265acb3d4ad4549018c1803c7fd1bc77fafa","first_seen":"2025-12-08T01:11:36.14103Z","last_seen":"2026-02-08T09:06:55.669988Z","times_seen":87,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/button_middle.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/button_middle.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 220\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-dc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8W2PYKu8qOOn1MIpn5NOoDPTSucIcIqhnQiueDbfTwAE0VN5ZMpXBsJsvV7nDYpt1nPJaQC2X7dZTyDLWJEq9UKQEYFfn2eKLA4C8eNLSr5ms7bMGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bc82b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e4522cd96925856f238d980f0fcf1e2","sha1":"22321e4b236f1e2d2125d968b389d52d61eb7289","sha256":"e0b7610e3763b4fec3a8f017bc90d93ed6e4c941d849e44bde927162fbc4a856","sha512":"0a5f1619d4c90d1871ffd6a834398c8ea5596874390caa10f2f45834edf0984f7e7a664ae74c13678bb1a1c9b30b3046866b5e1920997042c0857c4c0b84a4a9","ssdeep":"","tlshash":"47d0230f1d396167decd5dbd034178524ec4f1dad25679d423d416e4a1818d5574071f","first_seen":"2025-10-15T07:33:36.101673Z","last_seen":"2026-06-25T00:48:14.685815Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/apple-touch-icon.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/apple-touch-icon.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8916\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=6,i=?0\r\netag: \"693da96d-22d4\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5mEmBN7JwXedjakCTUyp80d4mK4kd5u5j6Y69l0faJD0ohqkWkTeSa2SZLxD9JUtIaTCIaRyfZEuWybBOOWrwnw02e%2BErFAAf0ukcYQ1L8j7qDnwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442d48645a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47a22f24acaf2397884f0f1561f92d87","sha1":"e70176b305b24caffe6bc10ab112927f094cdcd1","sha256":"42b92787b3d4c92abd9258ce4a222c1b7497fe3849bc57c599b1ca957ee5fcfc","sha512":"c3df33ac51dd459b1015dc96a81b7530ad0c7be2f6a32283544b420b6a27f9b1d156324cf4b06c02e9ac7f07dfb421f3c6a76f835719729768f7bbbfbbf2f087","ssdeep":"192:esKEkiW8wJKxJTQwUsjNnG7dDrYMPnGXTr5xJwD0JHx5:esKEkim0PTc2sDrYMPnGjr5xJK0Rx5","tlshash":"4d02b0c08093d0fbf4aa7316a690f4dc59a29e1af11649ac746753331c31cade5c5de5","first_seen":"2026-02-01T01:01:12.881222Z","last_seen":"2026-02-01T14:51:45.741187Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/6.webp","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/6.webp HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10280\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-2828\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QeRsO2w5XyxBHl%2Bfo4Za2chf%2FVErIMN%2F%2Brh5vpul%2B8Tvh6415rVq21VJaaQXiir6IENtdROP177FC6174okuVs4c1%2F%2Bpz0nZbrdwDNFXtnEc%2BnKO6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c724429dfa05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b7055f132bdff83de8127c95d7c1d822","sha1":"5056486d63b386009868736e7a89e7251dc7615f","sha256":"b8c4c94dbc3314393b26db1d1016b7016dab53de12b7cc4e763198f7294afe19","sha512":"6849ba31d83ed40c4991fef9a5274afd8a4fdb1bd87371ff2f4036b4f29491e5eae666023df1e66ed184f8e4a63c50d8a85aa6cda5675434162dc4713efcf005","ssdeep":"192:FSi/EOJjOIn3Zhs7ffJRZVXfNhwfjF+NiDeYWCYmizWjjPOdrYaWEPlWoSryoxI:4isOxfKZVs70vYpZizCG1YapNKry","tlshash":"7d22c24b39d479dbc1f143f59c12c51fb45ecd50cbb59e9a0bc17497d12c221c696219","first_seen":"2026-02-01T01:01:12.981465Z","last_seen":"2026-02-01T14:51:45.741931Z","times_seen":3,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/general/intentPlacement.min.js?v=1.23.25","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/general/intentPlacement.min.js?v=1.23.25 HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 17:59:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"693da96f-a03\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTanPWM0B0O%2BP0Q29I%2Fbq8JKWwMC%2FHB2MYq3tcPe6WEMI9rP6vClW6s4UbrhJvOJJYYIwczCXCOLEP%2FW%2BtSZntRWzibBLcaK7CGIat2HHGzl7G8Uow%3D%3D\"}]}\r\ncf-ray: 9c724429efaf5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2563,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2563), with no line terminators","md5":"c3210fa1fb5dae9144cd793f11f4cd38","sha1":"0c3a0039c3ac54ccbf4c9124abb5b4350e16abbb","sha256":"3ac7b5e9cafcf9734fa034e2047a7155db8428b5960cc7ff28edb7e66b398724","sha512":"3498b02996b33cb90677227e82b39124620414a3ac095e989591af12c0af0089e8643f9e3de17852b150e747b7157bacfb261dc7bf9a0b3297d7e325f28a783a","ssdeep":"","tlshash":"b751cb99675e656507ed98ff73763282a850be413e47a440845ce0993873b03c0bbb78","first_seen":"2025-11-20T05:50:51.32315Z","last_seen":"2026-02-08T09:06:55.673297Z","times_seen":102,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-strike-wheel.win/assets/coinStrike/img/lightning.gif","fqdn":"coin-strike-wheel.win","domain":"coin-strike-wheel.win","tld":"win"},"ip":{"addr":"104.21.14.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coin-strike-wheel.win/","date":"2026-02-01T14:51:20.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-strike-wheel.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 12:30:30 GMT","end":"Sun, 12 Apr 2026 13:27:53 GMT"},"fingerprint":{"sha1":"73:A8:8A:F0:CE:4E:B7:DE:B7:B6:31:9F:82:B3:57:E2:7B:14:91:31","sha256":"94:BC:09:08:71:2A:43:2E:D6:17:49:F2:3E:33:1C:48:F9:C3:FA:FA:6F:0C:62:1E:87:2E:03:8A:52:07:BB:8E"}}},"request":{"raw":"GET /assets/coinStrike/img/lightning.gif HTTP/1.1\r\nHost: coin-strike-wheel.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coin-strike-wheel.win/assets/coinStrike/css/style.css?v=1.23.25\r\nCookie: _lguid=ee13dc67-9a9d-40a7-afbc-c34ae9ea4ee3; _lglp_id=dcbe9475-a89e-45d7-a2ee-589ab6e6ad74\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 14:51:20 GMT\r\ncontent-type: image/gif\r\ncontent-length: 402337\r\nlast-modified: Sat, 13 Dec 2025 17:59:09 GMT\r\npriority: u=4,i=?0\r\netag: \"693da96d-623a1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qD2hSy5fiEtzitWdna5ZrGZHHgcW6BeyclJ%2BlaPWdSgpEnNFG8mCM%2FuNXGlJRGxbqZcZ1DSN%2BgGVfNE%2FR%2BTbv3W0ZxWSVMMODGs5TU7Of3%2F4uIa%2FCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c72442bb81d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402337,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 600 x 600","md5":"e4db845a192c719bc7f6f947f94d4c39","sha1":"9533e2a53d511e1ed580e1d9e619a9c9c1b2c094","sha256":"046c67240b04f9f6e812a3b060c57c3ec464e132ebcd95ab9c490d4b66dae247","sha512":"56c078150005cf2cf9fd569b225da2179e5948b0be402254ecf7a7eef7e729984cb400206230ed1f7ca13abc52201f1250f5a6f88e5a24aa1bb0eceb0ea9c587","ssdeep":"6144:UOqud6zUfYrCRcpAl/dbpuEQCWsf09F0CyBhUXvMY7RctcP8YHxA4k1Swk0:JmJrEcKPbpuEwsf03GO0UPXHxtVwk0","tlshash":"3e84233fe82e8d053836303c3b066d724dac690d8c96fdb1d46cff4a45875b9a9e0999","first_seen":"2026-02-01T01:01:12.889207Z","last_seen":"2026-06-04T02:20:42.213424Z","times_seen":4,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"coin-strike-wheel.win","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}